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Abstract 

We recall some of the early occurrences of the notions of interac- 
tivity and symmetry in the operational and denotational semantics of 
programming languages. We suggest some connections with Indies. 

Proof theory and programming are deeply intertwinned research areas. 
This short paper will address and compare ideas from both sides, so it seems 
appropriate to begin by recalling what this general interplay is about, before 
we enter into the more specific topic we have in mind here, namely symmetry 
and interactivity of computation. 

First, a disclaimer is in order: the encounter of logic and programming is 
by far not limited to what is commonly called logic programming. This ex- 
pression refers to a programming style in which computation is proof search. 
I am speaking here of the larger match between two kinds of wide-range 
activities: 

• writing programs, or any piece of structured software, proving their 
correctness with respect to a specification, designing a language, im- 
plementing it via a compiler into another programming language, which 
may be itself amenable to the same kind of analysis, etc.; 

• formalizing proofs - interesting ones rely on various lemmas, sublem- 
mas, etc... -, checking them, or searching them, designing a logical 
system, encoding a logic into another, etc... . 
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This correspondence, or lexicon, has been working extremely well in the 
past two decades, for the mutual benefit of the two disciplines. It has un- 
derpinned the development of logic programming and of functional program- 
ming, based on the paradigms of proof-search and proof-transformation, re- 
spectively, and also of proof assistants such as the system Coq based on the 
Calculus of Constructions of Coquand and Huet. 

The lexicon is not just a term-to-term correspondence. It also concerns 
the internal structure - that is, the underlying engine - deeply. On one hand, 
the cut-elimination procedure transforms an "implicit" proof with lemmas 
(called cuts in logic) into an entirely explicit proof, and as a benefit allows 
for an analysis of the resulting cut-free proof that enjoys the subformula 
property (every formula appearing in the proof appears also in the conclu- 
sion). On the other hand, the normalization procedure, or more generally 
an operational semantics for a programming language, describes formally 
the computation steps of the programs. It turns out that cut-elimination 
in logic, and normalization in formal semantics of programming languages 
match closely. It has been remarked by Howard, who pointed out in [18] that 
there exists a one-to-one correspondence between proofs in natural deduction 
style and (typed) A-terms: this is the celebrated Curry-Howard isomorphism. 
More recently, Herbelin [17] noticed that A-caclulus could be seen as match- 
ing Gentzen's sequent calculus closely and directly, which was a door open to 
exhibiting more symmetries in syntax [10]. 

A fundamental new theoretical input of this period was Girard's linear 
logic [13], which entailed a thorough revisiting of proof theory, but also of 
the semantics of programming languages. A keyword behind linear logic is 
"resource consciousness" , which in turn may have a declination in time and 
in space. Linear logic focused on time, while the latest body of work of 
Girard - ludics - is also concerned with space. The main source of time 
complexity in the cut-elimination procedure comes from repeated uses of as- 
sumptions, which corresponds to duplication of computations. In linear logic, 
only formulas with an explicit modality (noted !) can be freely reused. Space 
consciousness, on the other hand, amounts to taking into account memory 
management. Time and space: think of your favourite home dictionary: it 
may have been used so many times that it is now in a very poor condition; 
or you may decide to put it away in your bookcase, but you discover that 
there is no room left for it on the shelves... 
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Important transfers inspired by the above lexicon include a revisiting of 
proof search in logic programming influenced by linear logic [5] , which in turn 
has been influential on the design principles of ludics, or the extension of the 
Curry/Howard correspondence from pure effect-free programs to ones with 
effects such as the raising of exceptions [16]. The so-called continuation- 
passing-style translations developed by computer scientists to capture the 
meaning of such effects happen to match precisely so-called double-negation 
translations (from classical to intuitionistic logic) designed by logicians much 
earlier. 

Some dual pairs 

It is remarkable that largely independent developments have converged to 
the recognition of the importance of symmetries in both worlds, and then of 
the paradigm of computation- as-interaction. Let me emphasize this from the 
computer science standpoint first. Here are a few often found (and related) 
complementary pairs: 

• a memory cell or location or register versus its actual contents or value; 
in object-oriented style, the record field names versus their values, the 
method names versus their actual definition; 

• input and output; 

• sending and receiving messages; 

• a program and its context (the libraries of your program environment - 
or the larger program of which the program under focus is a subpart, 
or a module); the programmer and the computer; two programs that 
call each other. 

One may also add vaguer, but helpful complementary pairs, taken from 
"human life": questions and answers, attack and defence, or - more down-to- 
earth! - male and female plugs. Such a "computer/man" style is often helpful 
informally, as in the sentences: "the programmer interacts with the computer 
through the top-level loop, typing commands and waiting for the prompts 
(or error messages)", or: "a program A computing a function f{a,b,c) of 
three arguments of boolean type has used only the first two arguments, and 
more precisely has first explored the second argument; as this argument was 
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itself the output of another program B, program A passed the control to 
program B, waiting for B's output or response; when B has finished, it 
passes the control back to A, which may proceed for a while and then wait 
for the output of a program C computing the first argument, etc.". In the 
programming language community, the latter mechanism is known as that of 
coroutines. It is interactive in nature: A, B. and C exchange questions and 
answers, in an incremental way, i.e., when B is resumed, it starts from the 
point of control that it had reached at the moment it had last returned an 
answer to A. 

This model of computation is so important and simple that it deserves 
an illustration by a simple example. Suppose you have a tree, whoses leaves 
are labelled by numbers (the internal nodes do not have labels, or they don't 
matter). One whishes, say, to add all the numbers at the leaves. A sim- 
ple recursive definition will do, but it embodies a commitment to inorder 
traversal of the tree. The coroutine view allows us to parameterize over the 
choice of the traversal algorithm (program ^4) , and over the computation we 
want to do with the labels of the leaves (program B). For example, one may 
take for program A a post-order traversal procedure, and for program B a 
simple procedure that adds its argument to the contents of a fixed register 
and returns the new value of the register. 

Interaction is also central in models of concurrent computation such as 
Milner's CCS or the 7r-calculus [26]. There, programs and agents may be 
active simultaneously but have to synchronize at appropriate points of their 
execution. The synchronization may involve the transmission of a value, one 
process being the sender and the other the receiver. The logical counterpart 
of process calculi is yet to be found. Some believed to find it in linear logic. 
Ludics may offer better chances, because of the importance of naming in these 
calculi (names of channels, of intermediate data or computations, etc.), and 
clearly names have to do with memory locations. 

In logic, the related pairs are the following: 

• Hypotheses and conclusions: Gentzen's sequent calculus manipulates 
formal sequents of the form F h A, where F and A are sequences of 
formulas, to be interpreted as: "the conjunction of the formulas in F 
entails the disjunction of the formulas in A". In sequent calculus, each 
connective comes with two introduction rules, one on the left of h. 
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the other on the right. Symmetry goes with the involutive character of 
negation, which is lost in intuitionistic logic. Thus sequent calculus (for 
classical logic) enhances symmetries, but cut-elimination, besides being 
inherently non-deterministic (whence the restrictions to intuitionistic 

subsystems), is rather clumsy (due to boring "commutative conver- 
sions"). The novelty of linear logic was to offer both symmetry and a 
satisfactory computational behaviour (confluence and normalization). 

• Proofs can be given a "dialogue-game" interpretation, and are then 
called strategies. This was first observed by Lorenzen and his coworkers 
in the early fifties (see e.g. [12]). Under this interpretation, a formula 
is checked for correctness through a dialogue between an opponent who 
doubts some formulas, and the player who justifies his proof step-by- 
step by exhibiting the rules he has used, in a top-bottom way. The 
dialogue begins as follows: the opponent challenges the player to justify 
the conclusion A. The player then exhibits the inference rule he has 
used last, which has, say, Ai, . . . , as antecedents. Then the opponent 
picks one of the formulas, say Aj, and again challenges the player to 
justify how he has reached this intermediate conclusion, etc... Note 
that in this approach, each dialogue is far from amounting to a full 
proof: it is the collection of all such dialogues or experiments which 
characterizes the proof. This is very much related to the notion of 
observation at the basis of the study of the equivalence of programs 
and processes in computer science. Unfortunately, the dialogue games' 
school remained at a static, descriptive level. The full fiavour comes 
when cut-elimination is interpreted as a play [11] (see also below). 

Computation as interaction 

From the computer science perspective, the history of the computation-as- 
inter action paradigm is inseparable from the study of sequentiality. Vuillemin, 
and Milner have given the first denotational definitions of a sequential func- 
tion, which were later generalized by Kahn and Plotkin to the framework of 
concrete data structures (see e.g. [4]). Intuitively, a sequential function is 
one for which a sequential schedule can be given. The best way to grasp it 
more exactly is to think of a sequential function as one of the programs in a 
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system of coroutines. In the example above, program A could be 

a b — true then ii a — true then true 

which is a partial specification of the logical and function of the first two 
arguments. The function /(a, b, c) associated with the program is sequential 
because it can be scheduled: first compute b, then a. Both arguments b and 
a are needed. Note that the following is another sequential schedule A' for 
the same function: 

if a = true then if 6 = true then true 

Some functions in denotational semantics cannot be scheduled in this way, 
the simplest example being Plotkin's parallel-or function por, which is such 
that por{true, 1.) = true and pcir(±,true) = true. In these equations, _L is 
a symbol for an undefined value. (One endows B = {±, true, false} with the 
partial order defined by _L < true and _L < false.) A program implementing 
por should be able to output the value true as soon as either a or 6 is true, 
and supposing that a and b are the outputs of two programs P and Q it would 
necessitate computing P and Q in parallel. A more subtle example was given 
by Berry and is known as Gustave's function, or Berry-Kleene function (as 
Kleene had encountered a variant of this function too): 

Si^ (true, false, ±) = true 
i?i^(false, ±, true) = true 
BK{J-, true, false) = true 

This function too cannot be scheduled sequentially. In the mid-seventies. 
Berry worked on the modelling of the notion of sequential computation and 
isolated the important intermediate notion of stability (which later led Gi- 
rard, independently, to linear logic). The functions por and BK are typical 
examples of a continuous and non stable function, and of a stable and non se- 
quential function, respectively. Berry also had the insight that to model the 
sequential computational behaviours, and only them, one should move from 
a traditional framework of appropriate ordered sets (domains in the jargon 
of denotational semantics) and functions to a setting retaining more than the 
ordinary input-output behaviour of programs. For example, the two above 
schedules for the logical and function are given different interpretations in 
the model. 
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The insight resulted in the model of sequential algorithms [6], which I 
presented in 1978 in a Spring School on A-calculus in La Chatre. In this 
model, morphisms are not functions but pairs of a function and a compu- 
tation strategy for it, that specifies a schedule of interaction of the function 
with its argument. 

The model was then turned into syntax, and a programming language 
called CDS was developped [7]. The operational semantics of the language, 
which I presented in 1982 in a joint Prench-US workshop held in Fontaine- 
bleau, was - as far as I know - the first appearance of the notion of function 
application (or function composition) as a dialogue, from an operational point 
of view. We shall briefly explain how it works. A concrete data structure has 
a collection C of cells and a collection V of values. Datas x are represented 
as sets of pairs (c, v) such that c e C and v E V. Hence a data is made of 
elementary bricks which consist of a cell c filled with some value v. For ex- 
ample, the triplet (true, false, ±) may be represented as {(a, true), {b, false)}: 
there are three cells corresponding to the three coordinates a, b, c, and we 
spell out that a holds the value true, that b holds the value false, and that c 
is not filled. 

In CDS, computation proceeds in a lazy, stream- like way. If an expression 

a of the language, of any type, is entered for evaluation, the interpreter of 
the language prompts the user for a request c and returns the value v of this 
cell in (the meaning of) a, and then prompst the user for a new request ci, 
etc... 

The cells of a function type have the form xc', and the values have 
the form "valof c" and "output v'" . If / is a sequential algorithm, then 
{xc' , output v') G / (roughly) expresses that (c', v') G f{x), and (xc' , valof c) G 
/ expresses that, at input x, in order to compute the value of the output cell 
c', / needs, or waits for, the value of cell c. Now we are ready to explain 
the dynamics of function application, as illustrated by the two figures AP- 
PLICATION 1 and APPLICATION 2: f{x), when presented with a request 
c', consults the "state" y of an internal table, which stands for the part of 
the input x read so far (initially, the internal table is the empty set). The 
function is then asked the question yc'. If may either answer (cf. above) 
"valof c" or "output v'" . In the first case, control is transfered to the argu- 
ment X, because the value of cell c in a; is requested. When c answers with 
some V, then the internal table is updated and become y' = y U {{c, v)} , al- 
lowing for the more informed question y'c' to be asked. In this way a loop is 
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formed between / and x, whose "trace" consists of a sequence c, f, Ci, . . . 
of alternating '"opponent and player moves" (following the above dictionary 
of dual pairs) . The loop terminates when / has received enough information 
from x, i.e., when the internal table y has become large enough, so that / 
presented with yd answers with "output v'" , which yields v' as answer to the 
initial request c' to f{x). 

To be fair, this interactive sort of semantics was not the intended goal 
when we started. Our motivation was to provide a "denotational" description 
of the fully abstract model of PCF. The language PCF is a simply typed 
A-calculus with constants and recursion that encodes all partial recursive 
functions, and a fully abstract model is one in which two terms M and N 
receive the same interpretation if and only if they cannot be separated by any 
observation (cf. the dialogue interpretation of proofs, above). An observation 
on a term M is defined with the help of a context C (a term of base type 
with a hole): one evaluates C[M], which yields a base constant c or does not 
terminate. Two programs can be separated if there exists a context C for 
which C[M] and C[N] do not evaluate in the same way. 

Sequential algorithms did provide a fully abstract model, not for PCF, but 
for extensions of PCF with control primitives, as offered in the language CDS, 
or in PCF extended with an operation catch [9]. The model is effective in the 
sense that observational equivalence classes can be effectively enumerated, 
and there is even a finite number of them when the base types are themselves 
finite (such as the Booleans). Again, this full abstraction result was not the 
intended goal: we wanted a fully abstract model of PCF for short. But 
Loader's later result [24] settled the question negatively: he showed that 
the observational equivalence for PCF is not effective. As a matter of fact, 
the game-theoretic models of PCF given in 1994 by Abramsky, Jagadeesan, 
and Malacaria (AJM), and by Hyland and Ong (HO) [19, 2] offer syntax- free 
presentations of term-models, and the fully abstract model of PCF is obtained 
from them by a rather brutal quotient, called "cxtcnsional collapse", which 
gives little more information than Milner's original term model construction 
of the fully abstract model. 

With hindsight, the full abstraction problem was a very interesting, but 
poorly specified, problem. One looked for a "domain theory" -hke presenta- 
tion of the fully abstract model which was known to exist and to be unique 
[25]. But what domain-like meant exactly was not really spelled out. In par- 
ticular, the effectivity criterion came only to light when it was made possible 
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to contrast different sorts of game models. Indeed, tfie model of sequential 
algorithms was given a game-theoretic presentation by Lamarche [23]: the 
main difference with the AJM and HO models lies in the definition of the ! 
connective, which is set-based for sequential algorithms (whence its finitary 
character) and multiset-based for the AJM and HO models. 

But this poorly stated long standing "open problem" did trigger an im- 
portant amount of works which are often more important for their side effects. 
The variety of games models created a new era in denotational semantics, 
and the HO presentation of games led to an important classification of some 
features of sequential programming languages such as control, or references 
(see [3] for a survey). The whole approach received many insights from the 
developments of linear logic, and in particular of the geometry-of-interaction 
interpretation of hnear logic [14, 1] . For instance, Lamarche's decomposition 
of the function space in the model of sequential algorithms allowed me to 
give a more symmetric presentation of afiine sequential algorithms, as pairs 
of two functions, one from input data (or strategics, in game-theoretic terms) 
to output data, the other from output counter- strategies to input counter- 
strategies. In terms of the discussion above, the two functions take care of 
the pairs (xc', output v') (input x, piece of output {(/,v')) and (xc',valof c) 
("input" c', "output" c), respectively [8]. 

Last but not least, we discovered later that Kleene had the same ex- 
perience of a need to record internal information in addition to the plain 
underlying functions, and as a matter of fact he essentially built the Berry- 
Curien sequential algorithms at lower order types [21]. In his flourished 
vocabulary, he modelled higher-order recursive computations as "machines" 
communicating via "oracles" , or "envelopes" that are handed by the sender 
and opened by the receiver. 

In the early nineties, Cartright and Felleisen found another presentation of 
sequential algorithms, as "input-output" functions. This is achieved through 
the introduction of error values in the semantics. In the presence of these 
new values, the computation strategy can be made visible interactively, i.e., 
is part of the input-output behaviour. Take the above A and A': 

if b = true then if a = true then true 
if a = true then if 6 = true then true 

We have (forgetting about the dummy argument c): A{err,l.) = ± and 
A'{err, _L) = err, i.e. A and A' are different functions (note that A and 
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A' as functions differ only on data containing errors values). The informal 
explanation of these values is as follows: A needs its second argument, and 
hence cannot output anything if the second argument is _L; A' needs its 
first argument, and if this argument is err, this stands for some error that 
occurred when computing the first argument, which terminates the whole 
computation, so that the value err is propagated to the top-level (second 
occurrence of err in A' [err, _L) = err). 

It was a striking discovery for me to realize that Girard has introduced 
the same notion, on the logical side (dynamic dictionary!), which he calls the 
Demon. The Demon is placed somewhere in a proof which the player does 
not want to justify completely, or in a counter-proof or observation which the 
opponent wants to terminate. Think of a human situation where you have a 
few questions to ask to someone, and where you want to stop the conversation 
when you have got the answers you wanted to get. In the same way, errors 
help to terminate a computation that reveals a part of the behaviour of a 
program: the observation encoded by the argument (or counter-strategy) 
(err, _L) reveals that A' starts by examining its first argument. 

Interactive types 

The game-theoretic approach to semantics allows us to achieve a better match 
between primitive base types and defined data types. We illustrate this 
point with the Booleans. Recall that we interpret the boolean type as B = 
{_L, true, false}, where the order is given by ± < true and _L < false. The 
logicians have shown that Booleans can be defined in second-order logic as 
y X X ~> {X — > X). It was observed by Laird that there exists a suitable 
game o for which o — >■ (o — >■ o) is isomorphic to B [22]. To begin, note that 
this is not true with usual domains: either X consists of just _L, and then 
X ^ {X ^ X) is also a singleton (the map that sends ± and _L to _L), or X 
has at least one non-bottom element, and then it is easy to see that there will 
be strictly more than 3 elements in (the interpretation of) X {X X). 
But with games, one may consider a structure o with just one cell - called 
"?" -, and no value. Then a sequential algorithm viewed as a strategy can 
only be one of the three following sequences of moves (we write o — >^ o — > o as 
Oil — Oi2 — > Oi, and we place corresponding subscripts to the unique move 
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of each copy of o, thus, e.g., ?i2 refers to a move in 012): 

the empty sequence of moves 

? ? 
■1 -11 

? ? 

■1 -12 

or, with the notation used above: 

{} {({}?!, valof?n)} {({}?i,valof?i2)}. 

There is nothing to output, so the algorithms are mere schedulers here. Now, 
it is straightforward to match these three algorithms with ±, true, and false, 
respectively (and this is in agreement with the A-calculus encoding of \xy.x 
as true and Xxy.y as false). 

Following Girard's notion of behaviour in Indies, the interactive approach 
also allows us to enlarge the notion of "type" . A type is then a collection of 
programs that behave the same way, in reaction to a set of experiences or 
tests, which are nothing else than other programs. Taking images of ordinary 
life, this makes perfect sense: everyone can find for himself examples of how 
a change in his environment may have affected her or his behaviour. 

Let me give an example of type/behaviour, which may have potential 
applications. One may take as test set a single "taster" program A of type 
((o"iii ^ <^U2 X (^113 o'li) 0"i) that examines its argument - an algorithm 
of three arguments - and returns an error value if, say, the function says that 
it needs its ith argument. If its argument does something else, like outputing 
directly a value without looking at its argument, or says it needs its j'th 
argument {j 7^ i), then the taster does not proceed further, and in particular 
does not deliver any error or non-error value. Formally, we write (for i — 2): 

A =?i ?ii ?ii2 err . 

Then it is easy to see that the behaviour A-^ consisting of all programs or- 
thogonal to the taster, i.e., such that the interaction with the taster yields 
"error" (or Demon, cf. above), is the set of algorithms B that start by exam- 
ining their second argument, or, equivalently, such that B{±, err, ±) = err. 
This sort of neededness analysis is extremely useful in practice. Remember 
that the "Ariane V bug" was caused by an overflow due to a piece of useless 
data.... 
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This notion of type is well-suited to the semantics of subtyping: a subtype 
of a behaviour (where X is a set of tests) is just a behaviour of the form 

for a larger set of tests, i.e., X QY (and Y-^ C X-^). For example, the 
type of records with fields "year" , "price" , and "colour" is a subtype of the 
type of records with the fields "year" and "price" . A record of the latter type 
is interactively recognized by testing the presence of the two fields "year" and 
"price", while a third test for the presence of "colour" is needed to "type- 
check" the membership to the subtype. Moreover, intersection types are just 
usual intersections: this is what Girard calls the locative point of view, but 
we must end this exposition somewhere, and refer to [15]. 

With this collection of examples and bridges across logic and program- 
ming languages, we hope to have convinced the reader that the dictionary 
we started with continues to receive enrichments, in great part triggered by 
concepts born in computer science (such as the last mentioned: subtyping). 
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